Unscored CVE-2015-5943 EUVD-2015-5889GHSA-3jqc-gqj7-6fcm

SecurityAgent in Apple OS X before 10.11.1 does not prevent synthetic clicks from reaching keychain windows, which allows attackers to bypa…

Published Oct 23, 2015 · Updated Aug 6, 2024 · Assigned by apple

Description

SecurityAgent in Apple OS X before 10.11.1 does not prevent synthetic clicks from reaching keychain windows, which allows attackers to bypass intended access restrictions via a crafted app.

References

APPLE-SA-2015-10-21-4 vendor-advisory
https://support.apple.com/HT205375